CVE-2008-3834 The dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a denial of service (application abort) via a message containing a malformed signature...
LowCVSS 2.1
EPSS 4.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a denial of service (application abort) via a message containing a malformed signature, which triggers a failed assertion error.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freedesktop dbus | <= 1.1.4 | No fix listed |
| freedesktop dbus | = 0.1 | No fix listed |
| freedesktop dbus | = 0.2 | No fix listed |
| freedesktop dbus | = 0.3 | No fix listed |
| freedesktop dbus | = 0.4 | No fix listed |
| freedesktop dbus | = 0.5 | No fix listed |
| freedesktop dbus | = 0.6 | No fix listed |
| freedesktop dbus | = 0.7 | No fix listed |
| freedesktop dbus | = 0.8 | No fix listed |
| freedesktop dbus | = 0.9 | No fix listed |
| freedesktop dbus | = 0.10 | No fix listed |
| freedesktop dbus | = 0.11 | No fix listed |
| freedesktop dbus | = 0.12 | No fix listed |
| freedesktop dbus | = 0.13 | No fix listed |
| freedesktop dbus | = 0.20 | No fix listed |
| freedesktop dbus | = 0.21 | No fix listed |
| freedesktop dbus | = 0.22 | No fix listed |
| freedesktop dbus | = 0.23 | No fix listed |
| freedesktop dbus | = 0.23.1 | No fix listed |
| freedesktop dbus | = 0.23.2 | No fix listed |
| freedesktop dbus | = 0.23.3 | No fix listed |
| freedesktop dbus | = 0.31 | No fix listed |
| freedesktop dbus | = 0.32 | No fix listed |
| freedesktop dbus | = 0.33 | No fix listed |
| freedesktop dbus | = 0.34 | No fix listed |
Show 22 more
| Product | Affected versions | Fixed in |
|---|---|---|
| freedesktop dbus | = 0.35 | No fix listed |
| freedesktop dbus | = 0.35.1 | No fix listed |
| freedesktop dbus | = 0.35.2 | No fix listed |
| freedesktop dbus | = 0.36 | No fix listed |
| freedesktop dbus | = 0.36.1 | No fix listed |
| freedesktop dbus | = 0.36.2 | No fix listed |
| freedesktop dbus | = 0.50 | No fix listed |
| freedesktop dbus | = 0.61 | No fix listed |
| freedesktop dbus | = 0.62 | No fix listed |
| freedesktop dbus | = 0.90 | No fix listed |
| freedesktop dbus | = 0.91 | No fix listed |
| freedesktop dbus | = 0.92 | No fix listed |
| freedesktop dbus | = 1.0.2 | No fix listed |
| freedesktop dbus | = 1.1.1 | No fix listed |
| freedesktop dbus | = 1.1.2 | No fix listed |
| freedesktop dbus1.0 | = rc1 | No fix listed |
| freedesktop dbus1.0 | = rc2 | No fix listed |
| freedesktop dbus1.0 | = rc3 | No fix listed |
| freedesktop dbus1.1.0 | All versions | No fix listed |
| debian/dbus(Debian:12) | < 1.2.1-4 | 1.2.1-4 |
| debian/dbus(Debian:13) | < 1.2.1-4 | 1.2.1-4 |
| debian/dbus(Debian:14) | < 1.2.1-4 | 1.2.1-4 |
References
- Debian Security Tracker CVE-2008-3834 vendor-advisory
- bugs.debian.org issue-tracking
- kb.juniper.net
- SUSE-SR:2008:027 vendor-advisory
- openSUSE-SU-2012:1418 vendor-advisory
- 32127 third-party-advisory vendor-advisory
- 32230 third-party-advisory
- 32281 third-party-advisory
- 32385 third-party-advisory
- 33396 third-party-advisory
- DSA-1658 vendor-advisory
- www.freedesktop.org
- MDVSA-2008:213 vendor-advisory
- RHSA-2009:0008 vendor-advisory
- 31602 vdb-entry
- 1021063 vdb-entry
- USN-653-1 vendor-advisory
- ADV-2008-2762 vdb-entry
- bugs.freedesktop.org
- bugzilla.redhat.com
- dbus-dbusvalidatesignaturewithreason-dos(45701) vdb-entry
- oval:org.mitre.oval:def:10253 signature vdb-entry
- 7822 exploit
- FEDORA-2008-8764 vendor-advisory